Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DBbB1EWBQlxIk8GRonN8NkkrPqk.roa
File: DBbB1EWBQlxIk8GRonN8NkkrPqk.roa (raw, json)
Hash identifier: qAkyZ+Egdn80iHn3oUtgLalyglIT9knVbvxv3HjPOGQ=
Subject key identifier: 0C:16:C1:D4:45:81:42:5C:48:93:C1:91:A2:73:7C:36:49:2B:3E:A9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D9C94D2C701505C3A27CF9373C90493DE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DBbB1EWBQlxIk8GRonN8NkkrPqk.roa
Signing time: Mon 12 Feb 2024 09:10:15 +0000
ROA not before: Mon 12 Feb 2024 09:10:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:94:d2:c7:01:50:5c:3a:27:cf:93:73:c9:04:93:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 12 09:10:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c16c1d44581425c4893c191a2737c36492b3ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4e:e6:7e:d1:1a:e9:ee:35:a1:f1:fa:01:35:
58:ac:ed:0b:e9:57:04:ed:bd:00:e8:c6:de:44:cf:
fd:00:79:d5:21:0c:84:90:6b:96:63:15:4e:96:fe:
26:3e:c4:d7:76:15:14:13:8e:f1:06:a4:ca:68:eb:
65:a7:25:32:97:1c:db:16:d7:f0:41:bf:fd:35:06:
f8:bd:17:0b:ef:03:83:dd:99:ce:ed:47:8f:7e:10:
14:56:dd:3e:ce:28:52:a7:ee:65:a7:7d:21:0d:40:
91:44:f1:82:03:e0:3f:c8:1b:73:f1:d0:3e:6c:a2:
32:4e:f8:91:ef:42:4e:92:8e:4a:c9:64:a3:33:37:
57:f6:f5:57:e1:88:a4:94:5a:a0:56:0c:49:16:a2:
47:55:a1:51:2b:97:d7:52:cc:84:fa:14:43:61:3a:
ae:8e:9c:75:01:1f:4c:1d:b8:90:01:95:f8:55:5a:
65:4a:d2:bb:f4:eb:cd:87:1a:22:60:5a:cd:0a:4f:
64:c9:eb:48:63:83:ad:36:d4:b8:51:d3:bd:59:ea:
5a:8c:3d:d8:1b:84:3b:82:68:b1:22:2a:9a:9e:4c:
2f:4f:74:2e:5b:42:f6:09:28:81:32:4a:14:c4:ce:
b9:4a:27:28:2a:6a:f5:0c:a3:6e:ef:c1:3f:26:6c:
bd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:16:C1:D4:45:81:42:5C:48:93:C1:91:A2:73:7C:36:49:2B:3E:A9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DBbB1EWBQlxIk8GRonN8NkkrPqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:23:82:a8:df:f9:b8:6f:16:8f:6b:01:f8:72:3c:9a:4d:76:
62:49:a6:e3:24:45:58:6f:ad:23:f4:48:b8:16:5f:68:40:bb:
8a:2c:04:e6:10:8c:4f:7c:6e:61:67:50:30:ca:2c:99:18:67:
70:3a:d7:b1:45:74:56:2d:23:22:88:ea:01:ec:f8:47:87:42:
bf:a9:e4:c3:5a:e5:d9:a7:8f:52:71:31:f0:96:92:d8:45:f8:
95:eb:85:24:4c:f4:e1:7c:a9:1b:2c:d3:eb:10:98:e5:90:04:
80:89:2e:8b:dd:9d:92:66:8d:54:b4:62:69:74:49:5e:ff:bf:
52:6e:d1:94:5c:d7:ad:21:1e:c4:f4:00:e8:f2:00:24:3b:e0:
ca:09:83:76:dc:a0:cf:fb:5d:38:ec:6c:46:a0:39:7d:6b:e9:
67:e8:ef:d7:e5:75:8f:a2:95:20:f2:ac:3a:1a:8b:c7:92:7d:
f3:40:5c:a0:5b:70:52:ed:b7:a8:63:7a:21:7a:05:41:88:49:
c8:a3:11:d8:eb:55:00:4a:df:67:3c:57:4c:bc:9f:cf:49:f6:
e2:4d:01:4f:bf:ff:d5:23:ab:29:29:71:42:2e:8e:f4:dc:ec:
01:8e:9d:6f:62:3b:39:6f:a7:43:18:5d:5a:35:07:b1:bf:fc:
ff:f9:c0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:10 2025 by rpki-client